CiviCRM Community Forums (archive)

In http://forum.civicrm.org/index.php/topic,11911.0.html it mentions a security mailing list, but it doesn't look like it's being used.

An alternative could be if this forum could allow tagging a post as security-related (and does this forum have a feed feature - can't see one?).

Maybe a bigger question: While security notices are something I would follow, is there a general interest in this? Maybe there wouldn't be because as far as I know there is no easy way to patch specific security issues without doing a full upgrade (yes you can look in jira to find the code lines that changed, figure out if that change would be compatible with your current version, manually make the change, then internally document it so others don't overwrite it, etc).

Trying to gauge whether there is an interest / need for this.

Thanks but according to that earlier post I referenced everyone is already subscribed just it looks like the last email on that list was in 2007 and it was a test post.

Anyway I was just testing the waters to see what the interest level was.